$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer File: 895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer (raw, json) Hash identifier: UXkyhV0aA/tFAKimF+GhjLJ2VJPGHenMBgY2QTyduAE= Subject key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA9B93EA75512B68BCFAC4200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 53486 IP: 68.71.0.0/19 IP: 209.35.32.0/20 IP: 2607:eb00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3e:a7:55:12:b6:8b:cf:ac:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:61:1e:f9:e3:48:77:1a:4e:8f:47:70:a5: 69:25:9b:3d:cc:4b:61:d2:ed:21:87:26:95:a7:b2: be:3c:74:85:b5:3b:c9:95:ea:8b:f9:01:1f:3c:10: de:10:9a:3a:31:aa:8d:78:9d:c4:9d:db:c6:37:e6: 0a:22:e8:98:2c:1c:b1:7f:6b:5d:6d:4e:d7:b3:40: b2:1b:bc:a1:06:bd:9b:7d:74:3e:d6:69:83:4a:dd: 93:80:25:ad:b7:de:75:1e:82:44:86:c8:eb:fb:8a: 28:c5:a9:a4:4c:44:e6:d2:3c:e4:e6:be:7f:9e:c9: 52:5c:78:08:58:37:dc:69:95:1b:53:0b:54:54:6f: bd:d9:94:52:f3:aa:45:fa:86:a9:89:d0:65:07:52: ed:72:62:28:fd:3d:b4:6c:ab:0f:c9:7c:7a:bc:42: 99:b7:38:0d:17:83:6e:e5:99:dd:58:c8:ea:94:d2: 9e:72:b4:18:4c:d7:da:3c:9c:2c:c4:65:1b:75:60: 5e:4f:55:b4:a4:b2:fc:1a:74:18:dc:e1:0b:4d:77: 38:77:ac:a7:7e:a5:b2:f8:d8:64:ba:d0:a6:dd:c5: e6:4f:f0:db:3e:59:2d:6b:87:35:54:6f:67:95:c5: 11:dc:93:8e:b2:aa:9d:fd:1c:5c:10:20:6c:11:42: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 68.71.0.0/19 209.35.32.0/20 IPv6: 2607:eb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53486 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:98:19:4c:d7:1a:cf:be:0e:5f:98:47:b8:f1:80:65:e1:f6: 7f:3d:5f:c7:85:20:41:ad:21:64:b5:b7:39:fb:f4:de:c8:90: d7:87:1e:82:42:ad:39:a0:54:f2:73:38:ff:3a:e7:49:58:57: 2e:c8:a7:c3:ed:e2:b8:df:6e:ec:ce:18:94:14:8a:d0:f5:22: 7d:c1:cc:19:1a:fd:eb:04:28:81:bc:47:35:e1:76:98:d9:52: e2:ec:8d:7b:16:a2:a7:80:f1:6f:08:97:2a:a7:4e:43:44:be: 19:11:bf:db:2f:29:c6:83:6f:8b:cc:ef:28:e8:4c:26:fd:06: cf:67:e6:3a:64:df:62:23:08:8e:47:1d:e5:62:0f:ce:f1:a8: 7a:12:4d:f2:12:e6:2f:2b:51:bb:ee:84:3f:b7:57:17:2c:14: 84:50:99:45:f6:3c:76:c7:e4:89:58:16:80:3b:dc:47:25:b9: 7d:6d:74:48:96:e6:24:df:21:af:3b:9f:5d:0c:10:74:45:90: 1a:1e:c4:18:b8:29:fe:50:04:01:64:7b:f4:57:4b:f4:91:70: 4c:b0:ca:6e:30:38:3d:da:f8:b6:12:0d:d9:6e:f6:07:05:22: 82:1f:3d:be:93:c1:2d:a3:80:e7:89:59:31:57:22:8f:63:73: 0c:fb:e2:6d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEqpuT6nVRK2i8+sQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk ODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVhhHvnjSHcaTo9HcKVpJZs9zEth0u0hhyaV p7K+PHSFtTvJleqL+QEfPBDeEJo6MaqNeJ3EndvGN+YKIuiYLByxf2tdbU7Xs0Cy G7yhBr2bfXQ+1mmDSt2TgCWtt951HoJEhsjr+4ooxamkTETm0jzk5r5/nslSXHgI WDfcaZUbUwtUVG+92ZRS86pF+oapidBlB1LtcmIo/T20bKsPyXx6vEKZtzgNF4Nu 5ZndWMjqlNKecrQYTNfaPJwsxGUbdWBeT1W0pLL8GnQY3OELTXc4d6ynfqWy+Nhk utCm3cXmT/DbPlkta4c1VG9nlcUR3JOOsqqd/RxcECBsEUIIwwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFIujcMzIlmwUq5y3vy7b8Wa/Y6jFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg5NWI5MWRkLTNhMWYtNDZlOC04 OGU5LTFhMDZhMWM4ODc1Ni84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFj ODg3NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVERwADBATRIyAwDQQCAAIwBwMFACYH6wAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANDuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHOYGUzXGs++Dl+YR7jx gGXh9n89X8eFIEGtIWS1tzn79N7IkNeHHoJCrTmgVPJzOP8650lYVy7Ip8Pt4rjf buzOGJQUitD1In3BzBka/esEKIG8RzXhdpjZUuLsjXsWoqeA8W8IlyqnTkNEvhkR v9svKcaDb4vM7yjoTCb9Bs9n5jpk32IjCI5HHeViD87xqHoSTfIS5i8rUbvuhD+3 VxcsFIRQmUX2PHbH5IlYFoA73EcluX1tdEiW5iTfIa87n10MEHRFkBoexBi4Kf5Q BAFke/RXS/SRcEywym4wOD3a+LYSDdlu9gcFIoIfPb6TwS2jgOeJWTFXIo9jcwz7 4m0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:49 2025 by rpki-client